Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/938c1d1d-2e8b-36f9-9316-4ad040f22834.roa
File:                     938c1d1d-2e8b-36f9-9316-4ad040f22834.roa (raw, json)
Hash identifier:          2uLNr9MHUNulTbcFxHx4QGF9zUgffu9hCRx7KMz/ZXY=
Subject key identifier:   0E:F9:1D:D0:91:48:90:AD:7F:B5:70:58:16:EF:F7:E4:72:9E:F4:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F15CCFA29E9F0CABF263C0BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/938c1d1d-2e8b-36f9-9316-4ad040f22834.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     397204
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:fa:29:e9:f0:ca:bf:26:3c:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=9823a1cc-7dbb-4181-9372-814fba88deff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:12:db:70:80:38:eb:c4:22:fc:f9:f1:cc:
                    87:10:23:77:f8:a5:cf:2e:e5:94:e4:2e:43:d2:72:
                    7c:25:9b:95:9c:f3:e0:85:73:95:ef:86:23:63:77:
                    43:31:bd:14:6f:ad:7e:11:9b:9f:2d:61:4d:1d:a3:
                    75:9b:5e:fa:fd:a2:b4:e9:17:dd:4d:90:95:7b:51:
                    1a:a9:a0:55:0a:31:94:30:6c:93:d9:e2:de:bd:e2:
                    f4:21:6c:a3:89:b0:4a:4d:0e:f7:e7:01:c0:c9:bb:
                    07:2b:61:7f:62:4e:40:74:9b:01:19:00:48:1d:b2:
                    20:ca:3f:e1:3b:ef:56:50:8d:6f:11:ce:43:ea:e2:
                    54:10:44:0d:f1:2f:c1:23:7b:c4:ea:d4:da:c5:00:
                    fb:8c:2f:9d:ea:42:5a:5d:5a:55:e7:55:2b:cc:01:
                    a5:a8:9d:aa:ff:c2:8d:58:97:e8:85:ab:12:eb:df:
                    14:bf:89:4b:c4:73:a1:c7:b6:dd:ec:48:6e:95:64:
                    50:98:4e:ba:1f:4f:77:0f:6e:58:f2:8c:0f:66:7f:
                    2c:dd:93:cd:eb:58:99:9e:4d:41:83:d5:2c:dd:b9:
                    5e:8d:cc:dd:b8:fe:94:dc:07:14:65:7e:42:90:fe:
                    a8:c7:aa:1d:ce:36:83:87:e0:96:15:dc:0c:15:9d:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F9:1D:D0:91:48:90:AD:7F:B5:70:58:16:EF:F7:E4:72:9E:F4:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/938c1d1d-2e8b-36f9-9316-4ad040f22834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:fa:52:0e:d8:54:a9:98:a6:fd:75:b8:b9:5e:52:45:81:95:
         c6:e4:40:7a:98:9a:cb:41:bc:0f:d2:54:10:b7:69:a9:1c:49:
         53:4f:69:52:78:73:36:1d:94:a6:3c:6d:a5:54:88:69:f1:b2:
         68:cd:45:42:f3:40:85:cf:b2:2d:17:c0:cb:d5:b2:7c:95:34:
         d5:31:1a:c8:01:b1:eb:ca:f0:d8:d5:fc:90:a8:6a:12:a6:f7:
         22:8b:8a:d2:a5:d6:0a:d7:fa:29:b4:61:1b:52:56:7d:f2:79:
         7d:e5:88:df:85:3d:38:df:2a:f7:1a:4a:a3:45:06:fb:d5:11:
         27:00:0d:d3:ea:2c:df:ca:86:32:96:19:b6:3d:44:ef:f9:f1:
         80:3b:91:e9:b3:3c:f4:3e:53:4e:7a:d0:49:30:96:d8:f5:6e:
         d4:1c:ee:a8:ee:4d:df:33:85:a1:cc:60:e4:86:cf:94:33:65:
         7d:55:27:18:03:4c:5f:02:1d:53:2f:cf:91:35:c0:33:bf:e7:
         75:0e:52:f5:d4:c9:bf:01:f2:1d:f0:83:e9:e8:da:59:b3:0d:
         2e:62:0a:7c:09:63:c2:c0:ba:3a:c9:e6:41:59:a4:18:20:55:
         13:32:11:89:1a:6f:69:d1:58:2a:d2:73:88:80:0a:c9:f7:be:
         be:27:b3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:24:04 2026 by rpki-client